Searchable encryption in Supabase with CipherStash Protect.js

If you're using Supabase — or even if you're just thinking about it — you should know that you can now encrypt your sensitive data and keep it searchable, thanks to CipherStash Protect.js.

Supabase is trusted by millions of developers. Every Supabase project is a dedicated PostgreSQL database, so whether you're working on a hobby project, a budding startup, or a scaling business Supabase gives you an open source SQL database without the hassle.

All customer data is encrypted at rest with AES-256 and in transit via TLS. Sensitive information like access tokens and keys are encrypted at the application level before they are stored in the database.

With CipherStash, all your sensitive data is encrypted at the application level before it's stored in Supabase, which means you can:

1. Meet the strictest requirements for regulated industries.

2. Close deals with businesses that have data security compliance obligations

3. Create a strong security culture with a privacy-first development strategy.

Under the hood, Protect.js uses CipherStash's ZeroKMS to encrypt data in your application in a format that can still support equality, free text search, group by, and order queries.

Protect.js is built to work directly with the Supabase JS SDK so queries like this one work out-of-the-box with data that's been encrypted using Protect.js:

const { data, error } = await supabase
  .from('users')
  .select('*')
  .eq('email', searchTerm)

By combining CipherStash Protect.js with Supabase, you can create a secure, searchable database system that doesn't compromise on either security or functionality. The solution provides a robust way to handle sensitive data while maintaining the ability to search and query it effectively.

If you're building any application that handles sensitive data — like a healthcare app or a financial system — this combo is a perfect solution for you.

Check out the Supabase JS SDK and Protect.js reference guide for more technical details.